Privacy Policy
Information on data protection
We, Fritz und Mark Legal Rechtsanwaltsgesellschaft mbH, hereby inform you about how we, as the data controller within the meaning of Article 4 No. 7 of the EU General Data Protection Regulation (GDPR), handle your personal data.
1. Name and address of the data controller
The controller within the meaning of Article 4 No. 7 GDPR and other relevant data protection regulations is:
Fritz and Mark Legal Law Firm Ltd.
Wandsbeker Allee 77
22041 Hamburg
+49 (0)40-18024301-0
contact@fum-legal.de
2. Contact details of the data protection officer
You can reach the data protection officer of the controller as follows:
Data Protection Officer of Fritz and Mark Legal Law Firm Ltd.
Bernhard-Ernst-Str. 12
48155 Münster
Tel.: +49 (0)251-149828-0
Fax: +49 (0)251-149828-99
Email: kontakt@fum-legal.de
3. Your rights
As an affected person, you generally have the following rights:
Right to information
According to Article 15 of the GDPR, you can request information about your data processed by us. In particular, you can request information about the purposes of the processing, the categories of data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the logic involved.
Right to rectification
According to Article 16 GDPR, you can request the immediate rectification of inaccurate data or the completion of your data stored with us.
Right to erasure
According to Article 17 GDPR, you can request the deletion of your data stored with us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims.
Right to restriction of processing
According to Article 18 GDPR, you can request the restriction of the processing of your data if the accuracy of the data is contested by you or the processing is unlawful.
Right to data portability
According to Article 20 GDPR, you have the right to receive your data that you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller.
Right to object on a case-by-case basis
Pursuant to Article 21(1) GDPR, you have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on point (e) of Article 6(1) GDPR (processing necessary for the performance of a task carried out in the public interest) or point (f) of Article 6(1) GDPR (processing necessary for the purposes of the legitimate interests pursued by the controller or by a third party). This also applies to profiling based on these provisions within the meaning of Article 4(4) GDPR. If you object to the processing, we will no longer process your personal data unless our legitimate interests justify further processing. We also explicitly draw your attention to your right to object in this privacy notice in connection with the respective data processing.
Right to object to the processing of data for advertising purposes
If, in individual cases, we process your personal data for direct marketing purposes – should this be the case, you will find relevant information below – you have the right, pursuant to Article 21(2) GDPR, to object at any time to the processing of personal data concerning you. This also applies to profiling insofar as it is related to such direct marketing. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.
Right of withdrawal
If you have given us your consent to process your personal data, you can withdraw this consent at any time. Please note that the withdrawal will only take effect for the future. Processing that took place before the withdrawal is not affected.
To exercise your rights, please contact the data controller using the contact details listed under point 1.
Right to complain
According to Article 77 of the GDPR, you can lodge a complaint with a data protection supervisory authority regarding the processing of your personal data in our company, for example with the data protection supervisory authority responsible for us: The Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Str. 22, 20459 Hamburg, mailbox@datenschutz.hamburg.de.
4. Data security
We employ appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties (e.g., TLS encryption for our website), taking into account the state of the art, the costs of implementation, and the nature, scope, context, and purpose of the processing, as well as the existing risks of a data breach (including its likelihood and impact) for the data subject. Our security measures are continuously improved in line with technological developments.
5. Processing of personal data
We process your personal data as follows:
5.1. Visit our website
Description of data processing
Each time you visit our website, a so-called log file (server log file) is temporarily stored on our web server. This consists of:
- Page from which the page was requested (so-called referrer URL)
- Name and URL of the requested page
- Date and time of the server request
- Description of the web browser used (type, version)
- IP address of the requesting computer
- amount of data transferred
- operating system
- Message indicating whether the request was successful (HTTP status code)
- Websites and resources (images, files, other page content) that were accessed on our website
Purpose
The data is processed to deliver and ensure the functionality of the website. It is also processed for statistical purposes and to improve the quality of our website, particularly the stability and security of the connection. Furthermore, this data processing enables us to track and prosecute misuse.
Legal basis
Article 6 paragraph 1 sentence 1 letter f) GDPR
Designation of legitimate interest
The legitimate interest within the meaning of Art. 6 para. 1 sentence 1 lit. f) GDPR arises from the aforementioned purpose.
Recipients of personal data / Categories of recipients
No data will be shared with third parties. In strict compliance with the relevant data protection regulations, only our carefully selected service providers involved in hosting and maintaining our systems may be recipients of the data. This is done on the basis of data processing agreements, which contractually bind the service providers, and we remain responsible for the processing of the data in this respect.
We use the following hosting provider:
NETZCOCKTAIL GmbH
Dorpatweg 10
48159 Münster
Germany
Processing time
Your data will only be processed for as long as necessary to achieve the aforementioned purpose. In the case of data stored in log files, this is at the latest fourteen days after collection. In individual cases, there may be a further legitimate interest in storing the data for the purpose of defending against any legal claims that may be asserted.
Indication of whether provision is legally or contractually required / necessary for conclusion of contract / consequences of non-provision
Providing this data is neither legally nor contractually required, nor is it necessary for entering into a contract. Failure to provide this data will prevent you from visiting the website.
Right to object on a case-by-case basis
Pursuant to Article 21(1) GDPR, you have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR (data processing based on legitimate interests). If you object to the processing, we will no longer process your personal data unless our legitimate interests justify further processing.
5.2. Contact form
Description of data processing
Our website includes a contact form for electronic communication. The data entered into the form is transmitted to us, stored, and used to process the contact request.
Purpose
Contact form data is processed to handle inquiries.
Legal basis
Article 6 paragraph 1 sentence 1 letter b) or letter f) GDPR
Designation of legitimate interest
The legitimate interest within the meaning of Art. 6 para. 1 sentence 1 lit. f) GDPR arises from the aforementioned purpose.
Recipients of personal data / Categories of recipients
No data will be shared with third parties. In strict compliance with the relevant data protection regulations, only our carefully selected service providers involved in hosting and maintaining our systems may be recipients of the data. This is done on the basis of data processing agreements, which contractually bind the service providers, and we remain responsible for the processing of the data in this respect.
Processing time
Your data will only be processed for as long as necessary to achieve the aforementioned purpose, in this case, until the request is completed. Further storage may be required by legal regulations to which we, as the data controller, are subject (e.g., Section 257 of the German Commercial Code (HGB), Section 147 of the German Fiscal Code (AO)). Furthermore, there may be a legitimate interest in storing the data to defend against any legal claims that may be asserted.
Indication of whether provision is legally or contractually required / necessary for conclusion of contract / consequences of non-provision
Providing this data is neither legally nor contractually required, nor is it necessary for entering into a contract. However, if you do not provide the data, we may be unable to process your request.
Right to object on a case-by-case basis
Pursuant to Article 21(1) GDPR, you have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR (data processing based on legitimate interests). If you object to the processing, we will no longer process your personal data unless our legitimate interests justify further processing.
5.3. Newsletter
Description of data processing
In addition to simply browsing our website, we offer a newsletter subscription to keep you informed about current developments and events. By subscribing to our newsletter, you consent to the processing of your personal data. We use a double opt-in process for newsletter subscriptions. This means that after you subscribe, we will send an email to the address you provided, asking you to confirm that you wish to receive the newsletter. When you subscribe to our newsletter, we collect, store, and process the following "newsletter data":
- IP address of the requesting computer.
- E-mail address
- Date and time of registration and confirmation
Please note that we analyze your user behavior when sending our newsletter. For this analysis, the emails we send contain web beacons or tracking pixels, which are single-pixel image files stored on our website. For the analysis, we link the aforementioned data and the web beacons to your email address and a unique ID. Links in the newsletter also contain this ID. The data is collected exclusively in pseudonymized form; that is, the IDs are not linked to your other personal data, thus preventing any direct identification of individuals.
Purpose
The newsletter data is processed for the purpose of sending the newsletter and verifying the legitimacy of the mailing. The purpose of the double opt-in procedure is to verify your registration and, if necessary, to investigate any potential misuse of your personal data.
Legal basis
Article 6 paragraph 1 sentence 1 letter a) GDPR and letter f) GDPR
Designation of legitimate interest
The legitimate interest within the meaning of Art. 6 para. 1 sentence 1 lit. f) GDPR arises from the aforementioned purpose (proof of authorization to send newsletters and prevention of misuse).
Processing time
Your data will only be processed for as long as necessary to achieve the aforementioned purpose. In particular, your data will generally no longer be processed if you unsubscribe from our newsletter. Further storage may be required by legal regulations to which we, as the data controller, are subject (e.g., Section 257 of the German Commercial Code (HGB), Section 147 of the German Fiscal Code (AO)). Furthermore, there may be a legitimate interest in storing the data for the purpose of defending against any legal claims that may be asserted against us.
Indication of whether provision is legally or contractually required / necessary for conclusion of contract / consequences of non-provision
Providing this data is neither legally nor contractually required, nor is it necessary for entering into a contract. Failure to provide the data will result in the inability to send you the newsletter.
Right of withdrawal
You can withdraw your consent to receive the newsletter and unsubscribe at any time. You can do this by clicking the link provided in every newsletter email or by sending an email to contact@fum-legal.de or by sending a message to the contact details provided under point 1.
5.4. Email, fax and telephone contact
Description of data processing
You can contact us via the provided email address, fax, or telephone number. In this case, the personal data you transmit via email, fax, or telephone will be stored.
Purpose
The personal data you provide in connection with your inquiry will be processed solely for the purpose of handling your contact request. This also constitutes the necessary legitimate interest in processing the data.
Legal basis
The legal basis for processing data transmitted via email, fax, or telephone call is Article 6(1)(f) GDPR. If the contact aims at concluding a contract, the additional legal basis for processing is Article 6(1)(b) GDPR.
Designation of legitimate interest
The legitimate interest within the meaning of Art. 6 para. 1 sentence 1 lit. f) GDPR arises from the aforementioned purpose.
Recipients of personal data / Categories of recipients
No data will be shared with third parties. In strict compliance with the relevant data protection regulations, only our carefully selected service providers involved in hosting and maintaining our systems may be recipients of the data. This is done on the basis of data processing agreements, which contractually bind the service providers, and we remain responsible for the processing of the data in this respect.
Processing time
Your data will only be processed for as long as necessary to achieve the aforementioned purpose. Further storage may be required by legal regulations to which we, as the data controller, are subject (e.g., Section 257 of the German Commercial Code (HGB), Section 147 of the German Fiscal Code (AO)). Furthermore, there may be a legitimate interest in storing the data for the purpose of defending against any legal claims that may be asserted.
Indication of whether provision is legally or contractually required / necessary for conclusion of contract / consequences of non-provision
Providing this data is neither legally nor contractually required, nor is it necessary for entering into a contract. Failure to provide this data will prevent us from contacting you.
Right to object on a case-by-case basis
Pursuant to Article 21(1) GDPR, you have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR (data processing based on legitimate interests). If you object to the processing, we will no longer process your personal data unless our legitimate interests justify further processing.
5.5. Data protection information for applicants
With the following information, we would like to give you an overview of the processing of your personal data as an applicant for a job offer or as part of a speculative application.
Description of data processing
If you apply for a job posting or submit an unsolicited application to us and provide us with personal data by sending us your application documents, during personal interviews and correspondence, we will collect and process this data to the extent necessary for deciding on your application and establishing an employment relationship.
This typically includes the following data: surname, first name, and date of birth; contact details (email address, telephone number); application data such as information about your school and vocational or university education, including certificates, your professional career including references from previous employers, other professional qualifications, and activities. If you voluntarily provide us with additional personal data, we will also store this information. We generally collect this personal data directly from you.
If your application is successful and you are offered employment, your data will be included in your personnel file and processed for the purpose of establishing and carrying out the employment relationship. You will be informed separately about this if you are hired.
Purpose
We process the data you provide to review your application and your suitability for the advertised position, as well as to conduct the application process. Furthermore, your data may also be processed for legal purposes, in particular to the extent necessary for asserting, exercising, or defending mutual legal claims arising from the application process.
Legal basis
The legal basis for processing your personal data to the extent described is Section 26 Paragraph 1 Sentence 1 of the German Federal Data Protection Act (BDSG). If your application documents contain special categories of personal data pursuant to Article 9 Paragraph 1 of the GDPR, we process this data within the scope of the application process for the exercise of rights or the fulfillment of obligations under employment law, social security law, and social protection law. The legal basis in this respect is Article 6 Paragraph 1 Letter c of the GDPR in conjunction with Article 9 Paragraph 2 Letter b of the GDPR and Section 26 Paragraph 3 of the BDSG.
The processing of your data for the purposes of legal prosecution is based on Section 26 Paragraph 1 Sentence 1 BDSG or Article 6 Paragraph 1 Sentence 1 Letter f GDPR.
Designation of legitimate interest
Our legitimate interests arise from the aforementioned purposes as well as from the need to be able to examine and defend against claims asserted by applicants.
Recipients of personal data / Categories of recipients
Your application data will only be passed on to those departments or individuals within the company who need it to carry out the application process and to screen applicants.
We do not intend to share the information you provide with third parties or other external entities. Your data will generally only be transferred if you have given your consent or if we are legally obligated to do so by law or official order.
Processing time
If your application leads to employment or an apprenticeship, your data will be included in your personnel file. If your application is unsuccessful, we will delete your application documents and the personal data they contain no later than six months after you send us the rejection. After this period, we will destroy any paper copies of your application documents and data, unless you have explicitly requested that the originals be returned to you. Electronic data will be deleted after six months. Data will only be stored for longer if it is necessary for the defense of legal claims, if legal regulations exceptionally preclude deletion, or if you have expressly consented to longer storage.
Indication of whether provision is legally or contractually required / necessary for conclusion of contract / consequences of non-provision
Providing the personal data required for the application process is necessary for its execution. The absence of relevant personal data in the application documents may result in your application not being considered.
Right of withdrawal
If you have given us your consent to process your personal data, you can withdraw this consent at any time. Please note that the withdrawal will only take effect for the future. Processing that took place before the withdrawal is not affected.
Right to object on a case-by-case basis
Pursuant to Article 21(1) GDPR, you have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR (data processing based on legitimate interests). If you object to the processing, we will no longer process your personal data unless our legitimate interests justify further processing.
6. Use of cookies and similar technologies and other services
Cookies and data processing based on them
We use cookies on our websites. Cookies are small text files that are stored on your hard drive and assigned to your browser by a unique string of characters. These cookies allow the entity that sets the cookie to receive certain information. Cookies cannot run programs or transmit viruses to your computer and therefore cannot cause any damage. They serve to make the overall internet experience more user-friendly and efficient, thus enhancing your browsing experience. Cookies may contain data that allows the device being used to be recognized. However, some cookies only contain information about certain settings that are not personally identifiable.
Any use of cookies that is not strictly technically necessary is only permitted with your consent. This applies in particular to the use of advertising, targeting, or sharing cookies. Furthermore, your personal data collected through cookies will only be processed if you have given your consent.
You can configure your browser to generally prevent the setting of cookies. You can then decide whether to accept cookies on a case-by-case basis or accept cookies by default. However, please note that in this case you may not be able to fully utilize all the functions of this website.
Right of withdrawal
You can withdraw your consent at any time. Details on how to exercise your right of withdrawal can be found below (on a case-by-case basis in connection with the description of the respective data processing activities). Please note that the withdrawal is only effective for the future. Processing that took place before the withdrawal is not affected.
The data we collect when obtaining your consent to the use of cookies, possibly via a so-called Consent Management Platform (CMP), serves to log your consent and thus, if necessary, to prove our authorization to use cookies. The legal basis for processing this data is Article 6(1)(f) GDPR. Our legitimate interest lies in being able to prove that you have given your consent.
Right to object on a case-by-case basis
Pursuant to Article 21(1) GDPR, you have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR (data processing based on legitimate interests). If you object to the processing, we will no longer process your personal data unless our legitimate interests justify further processing.
7. Automated decision-making / profiling
We do not carry out automated decision-making (including profiling) within the meaning of Article 22 GDPR.